PT-2026-24038 · Ubr · Ubr

Adrien Rey + 1 · Publicado 2026-03-09 · Atualizado 2026-03-12 · CVE-2025-41772

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions UBR (affected versions not specified)

Description An unauthenticated remote attacker can obtain valid session tokens. These tokens are exposed in plaintext within the URL parameters of the ''wwwupdate.cgi'' endpoint. The issue involves the exposure of session tokens, potentially allowing unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-598

Identificadores relacionados

CVE-2025-41772

Produtos afetados

Ubr

Referências · 8

• https://t.me/CVEtracker/46874 · Publicação no Telegram
• https://twitter.com/cracbot/status/2032049161068298648 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-41772 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2030974893873906037 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2031004167616290817 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-41772 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031122562898411893 · Publicação no Twitter
• https://mbs-solutions.de/mbs-2025-0001 · Aviso do Fabricante